Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
File: GZgd6LdyA5RZREi3oOYlwzo43GY.mft (raw, json)
Hash identifier: 6HfwYJC88NLuoELcMqZ7QheRMz5U2T7P9PJsnSE6e68=
Subject key identifier: 09:39:79:9E:EB:04:A6:B8:3F:CA:8C:A3:D3:DC:5A:F8:3D:EE:F1:C0
Authority key identifier: 19:98:1D:E8:B7:72:03:94:59:44:48:B7:A0:E6:25:C3:3A:38:DC:66
Certificate issuer: /CN=19981de8b7720394594448b7a0e625c33a38dc66
Certificate serial: 019D27E079BC650688F50F5AD2E3C535D5B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
Manifest number: 0427
Signing time: Thu 26 Mar 2026 02:01:55 +0000
Manifest this update: Thu 26 Mar 2026 02:01:55 +0000
Manifest next update: Fri 27 Mar 2026 02:01:55 +0000
Files and hashes: 1: GZgd6LdyA5RZREi3oOYlwzo43GY.crl (hash: M7fvqbqz1pSdcb3ZdK4Ql+4coAKOlroz2ntvz2JuWaU=)
2: ps8p5Yxss_yS4gX9BmkqFddX40Q.roa (hash: nYuC3F6vhPJEBCLmfMqrTPfplxmjR9SoiZf1ZnDUcP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:79:bc:65:06:88:f5:0f:5a:d2:e3:c5:35:d5:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19981de8b7720394594448b7a0e625c33a38dc66
Validity
Not Before: Mar 26 02:01:55 2026 GMT
Not After : Mar 27 02:01:55 2026 GMT
Subject: CN=0939799eeb04a6b83fca8ca3d3dc5af83deef1c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a3:f9:17:c4:50:77:ee:f5:6b:ab:7e:e9:7a:
4c:a8:60:88:fd:8c:da:7f:a2:48:42:c8:70:f0:76:
d2:f6:eb:eb:61:1c:1a:c5:5d:13:ea:ef:61:a9:78:
fc:63:55:e7:90:81:4c:22:53:87:ac:e2:8b:3a:c2:
80:53:85:f4:cb:34:f9:d5:b9:f5:8c:03:8a:f7:5f:
c6:62:93:7c:a2:5b:35:e2:7a:bb:ed:5b:44:bc:44:
31:fd:98:40:6b:8e:6e:a5:c8:96:39:7d:9d:ce:48:
01:00:4b:3a:ee:07:a9:2e:17:46:40:f2:c4:8f:32:
ad:ab:82:74:76:2a:4f:c2:9a:ac:23:7a:8b:ae:18:
10:f0:33:8b:bd:87:b3:ca:f0:80:00:76:f4:95:c6:
0f:ee:a6:da:c7:87:4b:4f:b7:4f:c3:46:43:eb:87:
3b:49:57:29:05:54:2b:69:34:db:f0:58:38:ef:89:
22:71:34:df:cc:e8:17:4d:05:54:87:10:7c:7d:2e:
67:70:67:d8:19:42:63:38:9a:39:18:7e:5e:10:10:
8a:15:d0:f2:de:46:b5:2c:43:b9:a6:57:e8:b4:fa:
2e:a4:6d:f6:f4:9d:3f:a7:08:96:d4:be:82:17:61:
50:25:03:bc:a5:a0:74:71:b5:89:13:b8:04:69:56:
86:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:39:79:9E:EB:04:A6:B8:3F:CA:8C:A3:D3:DC:5A:F8:3D:EE:F1:C0
X509v3 Authority Key Identifier:
keyid:19:98:1D:E8:B7:72:03:94:59:44:48:B7:A0:E6:25:C3:3A:38:DC:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:09:80:2e:fd:76:f4:64:db:3a:91:1a:f1:49:0a:78:1a:70:
5f:a4:40:60:f5:47:98:da:ee:81:3a:98:9a:ef:bb:56:b6:d8:
bd:2c:c6:6b:c6:e9:c8:8c:fd:7d:88:92:d7:27:ad:62:bb:79:
b0:c9:58:ec:88:91:cc:dd:f0:84:59:96:22:2c:37:2a:91:ea:
ee:28:8a:43:8a:8d:21:74:71:22:a5:60:a6:5a:63:0a:ef:a0:
90:ee:99:80:13:92:2f:35:b4:b5:01:e5:a9:7c:e0:22:64:78:
25:98:01:66:cb:40:54:46:5e:7c:7e:06:be:09:fd:b7:f4:fb:
07:a6:36:40:c3:06:16:85:44:a5:a3:e1:82:94:1d:e1:c3:a9:
a3:cd:fa:d2:ef:07:14:b6:46:a9:e8:20:7f:7f:07:18:aa:55:
87:bf:55:35:19:c3:98:1f:48:8b:8d:66:df:16:7f:9c:b8:65:
7c:ca:b6:64:6d:ce:85:dd:3a:48:4a:fa:c7:29:e3:75:3a:d0:
11:4a:c0:e5:70:e0:c0:f1:89:c1:fb:f2:2f:2a:e9:cd:c2:85:
ae:b6:26:73:1c:da:44:63:ac:fe:1b:24:4e:d2:e0:97:a9:47:
6a:bc:1f:7b:16:f8:a3:5c:0c:d3:f3:53:5b:15:dc:27:79:01:
d3:20:1f:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4Hm8ZQaI9Q9a0uPFNdW5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5OTgxZGU4Yjc3MjAzOTQ1OTQ0NDhiN2EwZTYyNWMzM2Ez
OGRjNjYwHhcNMjYwMzI2MDIwMTU1WhcNMjYwMzI3MDIwMTU1WjAzMTEwLwYDVQQD
EygwOTM5Nzk5ZWViMDRhNmI4M2ZjYThjYTNkM2RjNWFmODNkZWVmMWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46P5F8RQd+71a6t+6XpMqGCI/Yza
f6JIQshw8HbS9uvrYRwaxV0T6u9hqXj8Y1XnkIFMIlOHrOKLOsKAU4X0yzT51bn1
jAOK91/GYpN8ols14nq77VtEvEQx/ZhAa45upciWOX2dzkgBAEs67gepLhdGQPLE
jzKtq4J0dipPwpqsI3qLrhgQ8DOLvYezyvCAAHb0lcYP7qbax4dLT7dPw0ZD64c7
SVcpBVQraTTb8Fg474kicTTfzOgXTQVUhxB8fS5ncGfYGUJjOJo5GH5eEBCKFdDy
3ka1LEO5plfotPoupG329J0/pwiW1L6CF2FQJQO8paB0cbWJE7gEaVaG1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAk5eZ7rBKa4P8qMo9PcWvg97vHAMB8GA1UdIwQY
MBaAFBmYHei3cgOUWURIt6DmJcM6ONxmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1pnZDZMZHlBNVJaUkVpM29PWWx3em80M0dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9jNjVlNDgtMzFjNC00OTc0LTg5ZjQt
YWMyYWU0ODM5NTVlLzEvR1pnZDZMZHlBNVJaUkVpM29PWWx3em80M0dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9jNjVlNDgtMzFjNC00OTc0LTg5ZjQtYWMyYWU0ODM5NTVl
LzEvR1pnZDZMZHlBNVJaUkVpM29PWWx3em80M0dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2wmALv12
9GTbOpEa8UkKeBpwX6RAYPVHmNrugTqYmu+7VrbYvSzGa8bpyIz9fYiS1yetYrt5
sMlY7IiRzN3whFmWIiw3KpHq7iiKQ4qNIXRxIqVgplpjCu+gkO6ZgBOSLzW0tQHl
qXzgImR4JZgBZstAVEZefH4Gvgn9t/T7B6Y2QMMGFoVEpaPhgpQd4cOpo8360u8H
FLZGqeggf38HGKpVh79VNRnDmB9Ii41m3xZ/nLhlfMq2ZG3Ohd06SEr6xynjdTrQ
EUrA5XDgwPGJwfvyLyrpzcKFrrYmcxzaRGOs/hskTtLgl6lHarwfexb4o1wM0/NT
WxXcJ3kB0yAfSQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:22:14 2026 by rpki-client